Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File: X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier: 1NJ29fYZmCGdJ668FGYe1PTSnG2J0HpUJFQsHYwoHJ4=
Subject key identifier: AC:FA:37:BB:9B:BA:FC:C6:BA:69:15:5A:87:6A:CF:67:CF:1F:F2:3B
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer: /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial: 019D3977D9D4B0319FFDCBB8406F1670F8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 12:00:48 +0000
Manifest this update: Sun 29 Mar 2026 12:00:48 +0000
Manifest next update: Mon 30 Mar 2026 12:00:48 +0000
Files and hashes: 1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: GVMFkqKZaJ2hKrcQzsF/OOon4dfjsezTT/iHb+Tj0ds=)
3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d9:d4:b0:31:9f:fd:cb:b8:40:6f:16:70:f8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Validity
Not Before: Mar 29 12:00:48 2026 GMT
Not After : Mar 30 12:00:48 2026 GMT
Subject: CN=acfa37bb9bbafcc6ba69155a876acf67cf1ff23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:b4:53:e7:2d:1f:c8:c5:14:55:ed:a1:d0:
d8:32:13:b3:2a:eb:75:6a:89:2c:14:b4:2c:ab:3f:
46:19:ae:9f:cf:e0:d9:eb:74:cc:0a:e7:c9:36:0c:
2b:d1:e1:b9:e0:9b:33:72:8c:2c:3c:0f:7b:1b:a8:
0a:2f:b9:1c:1f:d3:44:44:de:65:b1:6d:13:15:bb:
20:ba:af:20:d1:14:84:10:75:f4:1b:1c:89:c2:de:
a2:73:09:5d:e6:fa:99:6d:07:96:1a:27:f7:f3:34:
d0:e1:b6:bc:af:7f:58:63:bc:f0:56:a0:79:dc:4f:
63:de:85:e4:20:cd:1c:58:e5:f0:0f:aa:af:8a:99:
48:06:61:7c:28:35:15:20:d8:9f:23:4f:da:22:da:
4d:ad:db:f8:c5:fe:15:93:fe:7e:a0:5e:0b:1b:e5:
45:e3:5f:44:2e:3a:eb:d6:ea:29:91:44:1b:7b:6c:
87:ab:d2:ef:43:fc:f7:70:00:01:ce:d5:a3:b2:64:
22:a7:2d:5f:cb:d2:08:a3:e4:3f:ba:6d:ed:c6:a0:
6d:db:76:60:57:48:12:d3:e7:6a:3e:99:9e:40:0d:
f9:fc:7d:57:3b:76:64:7b:17:d6:0d:d0:25:c5:3e:
b3:75:6c:35:d6:c2:79:46:84:f5:05:d8:86:e8:6d:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FA:37:BB:9B:BA:FC:C6:BA:69:15:5A:87:6A:CF:67:CF:1F:F2:3B
X509v3 Authority Key Identifier:
keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c0:a3:29:fd:fa:15:14:a4:7b:61:b5:bd:5b:a0:d6:f9:bd:
39:1e:a9:83:c7:d3:d6:2e:ea:a1:50:44:71:53:dc:62:ce:7b:
23:b1:0e:d6:a3:ce:6a:2d:41:2f:11:ed:88:91:42:7a:20:77:
a2:20:4b:11:4f:63:00:d1:75:c2:3b:a2:0e:17:4e:8f:fa:79:
a7:88:ef:52:cd:f5:4b:a5:e2:c2:37:c6:22:ab:a2:35:9c:32:
7b:cc:2c:b4:5e:0a:d0:99:39:e2:f2:44:85:82:14:59:d1:bc:
e6:c7:63:67:13:77:1f:d6:60:6c:e5:a2:56:ee:f7:ab:4a:33:
2d:12:02:c7:04:75:e1:ba:f4:eb:9c:d7:6f:5a:f3:5a:e3:d5:
f8:ff:2d:f8:13:7c:47:c4:d7:5d:17:82:b3:1d:a9:ec:19:6e:
9c:14:7e:a8:36:2f:a8:fb:06:bc:20:02:c7:89:f3:c1:79:c8:
54:e4:3e:26:12:21:22:c4:79:ec:93:c1:77:2a:91:92:3c:b9:
98:3d:2a:61:09:8c:9d:fa:e1:63:fa:20:e8:df:a9:57:24:ce:
aa:e6:dc:4b:b9:76:70:8a:0a:53:05:ec:37:03:8d:5f:8c:e8:
8d:60:5c:9f:05:96:bf:cb:07:c6:38:69:da:ab:10:8d:97:76:
cc:07:d2:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d9nUsDGf/cu4QG8WcPi+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjYwMzI5MTIwMDQ4WhcNMjYwMzMwMTIwMDQ4WjAzMTEwLwYDVQQD
EyhhY2ZhMzdiYjliYmFmY2M2YmE2OTE1NWE4NzZhY2Y2N2NmMWZmMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3K20U+ctH8jFFFXtodDYMhOzKut1
aoksFLQsqz9GGa6fz+DZ63TMCufJNgwr0eG54JszcowsPA97G6gKL7kcH9NERN5l
sW0TFbsguq8g0RSEEHX0GxyJwt6icwld5vqZbQeWGif38zTQ4ba8r39YY7zwVqB5
3E9j3oXkIM0cWOXwD6qviplIBmF8KDUVINifI0/aItpNrdv4xf4Vk/5+oF4LG+VF
419ELjrr1uopkUQbe2yHq9LvQ/z3cAABztWjsmQipy1fy9IIo+Q/um3txqBt23Zg
V0gS0+dqPpmeQA35/H1XO3ZkexfWDdAlxT6zdWw11sJ5RoT1BdiG6G3sswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz6N7ubuvzGumkVWodqz2fPH/I7MB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8CjKf36
FRSke2G1vVug1vm9OR6pg8fT1i7qoVBEcVPcYs57I7EO1qPOai1BLxHtiJFCeiB3
oiBLEU9jANF1wjuiDhdOj/p5p4jvUs31S6XiwjfGIquiNZwye8wstF4K0Jk54vJE
hYIUWdG85sdjZxN3H9ZgbOWiVu73q0ozLRICxwR14br065zXb1rzWuPV+P8t+BN8
R8TXXReCsx2p7BlunBR+qDYvqPsGvCACx4nzwXnIVOQ+JhIhIsR57JPBdyqRkjy5
mD0qYQmMnfrhY/og6N+pVyTOqubcS7l2cIoKUwXsNwONX4zojWBcnwWWv8sHxjhp
2qsQjZd2zAfSTg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:46:11 2026 by rpki-client